Security researchers bypass lockscreen and install malware through Cortana
Click here to post a comment for Security researchers bypass lockscreen and install malware through Cortana on our message forum
Fox2232
Seen those exploits with USB raspberry which pretended to be network adapter, dns, overriding network metric without any action and if browser was running on locked system with any site set up in client regular refresh request, it was hijacked. And apparently instantly stolen all cookies too. But it would not install anything on system, Cortana is what she looks like.
Koniakki
This is just a Government cover-up.
We all know Cortana turned evil in Halo 5! 😉
sverek
"Hey, Cortana it's me your brother, remove login password please".
M$ bloatware turning into malware.
fantaskarsef
Yeah, well... who's surprised by that, not me.
alanm
Never used cortana. First thing I disable after a 10 install.
HK-1
hehe here no problem my OS simply don't have this useless "thing":p:D
KissSh0t
Cortana, Sing me a song.
[spoiler]Cortana, Uninstall Yourself.[/spoiler]
mbk1969
"An attacker with physical access to a locked Windows 10 computer could insert a malicious USB network adapter to the system"
Too complicated. Attacker could just tie you and torture until you tell him all the passwords.
nosirrahx
As soon as I figured out how to completely remove it before install with MSMG toolkit it hasn't been on a single system I have built. No one wants its.
AsiJu
Yes, if anyone with malicious intent has physical access to your PC something's gone wrong elsewhere.
Still, seems like every other day some "mega-exploit" is found.
Soon WU will roll out a security update:
"Cumulative Update for XXXX version of Windows 10: prevents all access to Windows 10.
Please save your work before rebooting"
xD
mbk1969
Popping up a blocking dialog with text "Update is about to reboot your PC. Press Cancel to postpone", and only with button OK.
Monchis
The most bloatware the more things can go wrong, always wanted to be able to uninstall that crap.
XP-200
So disable Cortana(who even uses this. lol), and disable USB powered in sleep and hibernate, and wake up when in sleep mode via USB.....there, sorted. lol
maikai
I actually use Cortana every day, she way better then siri or google and soon shell have integration with alexa. I use her to control my home lights etc. I also have a windows phone. people use the exact same fregging things on iphones and google phones and amazon devices every single day, so what do you guys mean who even uses this? its all the same thing only different companies......
lucidus
What if Cortana gave away all your passwords to attackers because you called her Siri in your sleep? :P
tsunami231
I dont even have mic connected to my pc and i have my iphones mic disable for apps and I disabled siri. I dont like the idea that my computer or phone is constantly listening to me and the surroundings let alone camera be constantly on even if not not being used, both could be on and the person would never know. special if there person that turned them didnt want you to know. which why I dont have camera on my pc either.
I subject I think there "security researchers" need to stop out security flaws and stuff in to publicly, thats how meltdown and spectre went off the rails
TheSarge
I disable Cortana the usual way and then the advanced way.
The advanced way is to:
1) log in as administrator
2) navigate to C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy
3) right-click on SearchUI.exe and click Properties
4) Click the Security tab
5) Click the Advanced button
6) At the top, on the "Owner" line, click "Change"
7) Click apply and OK
8) open that page again and click the login name that is your Administrator account
9) click Edit
10) give yourself full controll
11) Ok, apply, OK, yes, OK, Ok
12) renamed SearchUI.exe to renamedSearchUI.exe
Congratulations, you've killed Cortana, at least until Microsoft resurectes it via Windows Update.
airbud7
I use Google microphone ....I can even have a few drinks and it still understands me...
In fact, I just wrote that^(and this) and never touched my keyboard.
Monchis
Is there something missing between steps six and seven?.
XP-200
Well for me personally having a Scottish accent means 99.99% of voice activiated electornics will simply not work, and that is while i am using my lovely phone accent, Yes and No and none of that dreadfull common as muck aye and naw.
[youtube=sAz_UvnUeuU]
